Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
File: UOaW5uJbSSu34HyzKbtDVLERpoE.mft (raw, json)
Hash identifier: oPk/jHpE2W6ocV+OF3O2CNiQvjGJCniPAV6/0oUSeYo=
Subject key identifier: 8D:D6:8D:F2:B5:E1:8E:10:27:92:5C:68:F1:E7:9B:F5:CE:C9:73:C2
Authority key identifier: 50:E6:96:E6:E2:5B:49:2B:B7:E0:7C:B3:29:BB:43:54:B1:11:A6:81
Certificate issuer: /CN=50e696e6e25b492bb7e07cb329bb4354b111a681
Certificate serial: 0198D5F1B2CAA49CBDEDBF5FD2F379466E14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
Manifest number: 092A
Signing time: Sat 23 Aug 2025 08:00:43 +0000
Manifest this update: Sat 23 Aug 2025 08:00:43 +0000
Manifest next update: Sun 24 Aug 2025 08:00:43 +0000
Files and hashes: 1: DYFmv5SEYYlddrISWWXVdY1hSCw.roa (hash: TKf7tOlhVLq0cOqQ0nNkYPFgdP68RF3GWaqOQkMnAHw=)
2: UOaW5uJbSSu34HyzKbtDVLERpoE.crl (hash: g866TAnCKRJk+1ygMcNTLv663Qmpn9Tp/1NRSIJ5MEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:b2:ca:a4:9c:bd:ed:bf:5f:d2:f3:79:46:6e:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50e696e6e25b492bb7e07cb329bb4354b111a681
Validity
Not Before: Aug 23 08:00:43 2025 GMT
Not After : Aug 24 08:00:43 2025 GMT
Subject: CN=8dd68df2b5e18e1027925c68f1e79bf5cec973c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fe:e8:91:da:e9:2b:36:7f:6a:8f:dd:2d:fc:
f3:29:90:bf:9c:69:2d:ae:b1:35:d6:e5:69:55:34:
0a:25:e0:9b:d8:8d:cd:5a:16:75:c7:a3:4b:d1:1f:
ee:c6:56:64:38:06:65:51:5b:8e:a2:fe:4b:2c:01:
ea:1b:44:7a:2b:ab:fa:74:e2:fb:34:af:f0:7c:16:
fe:7e:19:f6:44:a7:54:ac:09:cb:f1:2b:5b:1c:24:
18:14:d5:8c:94:87:c0:99:83:fb:5c:bf:0d:4e:64:
2c:18:a2:d5:53:b2:53:a3:31:a4:52:7b:d8:16:23:
60:4c:7c:76:8d:2e:70:28:41:89:97:91:ae:08:c3:
af:34:88:5c:3e:d7:d5:05:c9:b9:c9:6c:9f:e2:78:
ee:32:15:34:0c:49:3c:f9:15:fb:46:ec:c4:4b:7a:
f5:42:d0:7f:78:94:41:67:3b:44:37:b9:d8:90:e1:
8f:a6:f5:39:13:23:49:6e:02:3a:85:56:6d:94:78:
b2:3c:3c:a3:f0:f1:6d:98:e9:23:a4:e7:29:7e:19:
35:92:e4:cf:2e:0f:fa:98:23:14:2a:6a:e1:d3:72:
4e:90:1e:62:86:d0:3e:a3:39:3d:b2:9d:d3:e3:1f:
48:53:3d:50:4b:e6:67:86:96:2a:47:b1:57:99:0f:
f5:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:D6:8D:F2:B5:E1:8E:10:27:92:5C:68:F1:E7:9B:F5:CE:C9:73:C2
X509v3 Authority Key Identifier:
keyid:50:E6:96:E6:E2:5B:49:2B:B7:E0:7C:B3:29:BB:43:54:B1:11:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:e5:09:09:9e:c0:b1:7f:71:f9:1b:aa:e8:6a:75:7a:c2:b8:
f0:b2:8d:78:8d:b9:68:02:51:7c:14:60:9b:ab:7a:70:db:56:
e8:46:0b:fd:c5:f1:dd:0b:71:67:f5:1a:6d:4b:0f:c1:78:f9:
1e:fd:45:45:25:17:c3:b6:d5:ba:5a:20:c3:9d:84:65:34:82:
be:61:d3:f1:24:50:ac:24:09:9c:da:c7:4c:1b:1e:76:da:1d:
82:62:86:af:91:b2:98:12:b2:31:55:a4:45:d1:5a:45:65:ef:
d8:6f:b6:89:7d:96:23:6d:5f:12:b8:56:20:6a:17:69:6f:69:
9c:d8:5d:60:65:2b:b5:35:e9:8f:5d:43:3f:ac:f6:cf:3f:d3:
83:3c:25:5d:de:a4:2b:b3:ab:95:53:c8:ac:1e:ef:a8:a4:36:
aa:a3:a7:61:94:36:11:7d:52:76:13:16:48:12:df:5b:02:09:
c9:86:56:52:a0:de:91:a2:27:23:71:b8:f6:1c:97:93:cf:87:
b3:be:19:4c:4a:e6:f9:65:c6:89:87:c0:9a:e9:fb:10:92:38:
ed:2f:60:96:fa:9c:98:14:8a:0e:fe:d3:48:2d:86:9d:91:41:
6f:68:5f:8e:69:51:7a:66:79:7c:2f:31:c2:87:4e:ac:d5:1e:
47:a5:cb:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:24:43 2025 by rpki-client